Files
advisory-db/crates/array-tools/RUSTSEC-2020-0132.md
Mikhail "L117" Nikolenko 5775f25882 Fixed memory corruption. (#776)
2021-02-22 08:21:17 -05:00

517 B

[advisory]
id = "RUSTSEC-2020-0132"
package = "array-tools"
date = "2020-12-31"
url = "https://github.com/L117/array-tools/issues/2"
categories = ["memory-corruption"]

[versions]
patched = [">= 0.3.2"]

FixedCapacityDequeLike::clone() can cause dropping uninitialized memory

Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided T::clone() panics in FixedCapacityDequeLike<T, A>::clone(). This causes memory corruption.